Comment by neodypsis

A problem I see is that someone could denoise an image and then add adversarial noise so that it resembles one of these signatures.